API tools faq
paste
Guest User

Untitled

a guest
May 2nd, 2012
58
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 16.81 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-05-02.03 - pc 02.05.2012 18:52:50.4.2 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.2374 [GMT 2:00]
  3. Spuštěný z: c:\users\pc\Desktop\blabla.exe
  4. AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
  5. FW: COMODO Firewall *Enabled* {7DB03214-694B-060B-1600-BD4715C36DBB}
  6. SP: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
  7. SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  8. .
  9. .
  10. ((((((((((((((((((((((((( Soubory vytvořené od 2012-04-02 do 2012-05-02 )))))))))))))))))))))))))))))))
  11. .
  12. .
  13. 2012-05-02 16:58 . 2012-05-02 16:58 -------- d-----w- c:\users\Public\AppData\Local\temp
  14. 2012-05-02 16:58 . 2012-05-02 16:58 -------- d-----w- c:\users\Default\AppData\Local\temp
  15. 2012-05-02 14:08 . 2012-05-02 14:08 -------- d-----w- c:\program files\COMODO
  16. 2012-05-02 14:04 . 2012-05-02 14:04 -------- d-----w- c:\program files\ESET
  17. 2012-05-02 10:25 . 2012-05-02 10:38 -------- d-----w- c:\program files (x86)\Microsoft Works
  18. 2012-05-02 10:21 . 2012-05-02 10:21 -------- d-----r- C:\MSOCache
  19. 2012-05-01 17:36 . 2012-01-17 12:46 31040 ----a-w- c:\windows\system32\nvhdap64.dll
  20. 2012-05-01 17:35 . 2012-05-02 16:40 -------- d-----w- c:\users\UpdatusUser
  21. 2012-05-01 17:34 . 2012-02-29 20:59 63296 ----a-w- c:\windows\system32\nvshext.dll
  22. 2012-05-01 17:34 . 2012-02-29 21:00 3089728 ----a-w- c:\windows\system32\nvsvc64.dll
  23. 2012-05-01 17:34 . 2012-02-29 21:00 6074176 ----a-w- c:\windows\system32\nvcpl.dll
  24. 2012-05-01 17:34 . 2012-02-29 20:59 889664 ----a-w- c:\windows\system32\nvvsvc.exe
  25. 2012-05-01 17:34 . 2012-02-29 20:59 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
  26. 2012-05-01 17:34 . 2012-02-29 20:59 118080 ----a-w- c:\windows\system32\nvmctray.dll
  27. 2012-05-01 17:34 . 2012-02-29 20:59 426304 ----a-w- c:\windows\SysWow64\oemdspif.dll
  28. 2012-05-01 17:33 . 2012-05-01 17:33 -------- d-----w- c:\programdata\NVIDIA Corporation
  29. 2012-05-01 15:38 . 2012-05-01 15:42 -------- d-----w- c:\program files (x86)\Cadkey98
  30. 2012-04-30 07:29 . 2012-04-30 07:29 -------- d-----w- c:\program files (x86)\Pando Networks
  31. 2012-04-22 23:02 . 2012-04-23 14:23 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
  32. 2012-04-22 14:11 . 2012-04-22 14:11 61440 ----a-w- c:\windows\SysWow64\drivers\ggql.sys
  33. 2012-04-11 08:35 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
  34. 2012-04-11 08:35 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
  35. 2012-04-11 08:35 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
  36. 2012-04-11 08:32 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
  37. 2012-04-11 08:32 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
  38. 2012-04-11 08:32 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
  39. 2012-04-11 08:32 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
  40. 2012-04-11 08:32 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
  41. 2012-04-11 08:32 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
  42. 2012-04-11 08:32 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
  43. .
  44. .
  45. .
  46. (((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
  47. .
  48. 2012-05-02 14:10 . 2011-09-05 07:01 525544 ----a-w- c:\windows\system32\deployJava1.dll
  49. 2012-04-04 13:56 . 2011-03-16 22:16 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
  50. 2012-03-17 09:29 . 2011-12-28 18:44 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
  51. 2012-03-17 09:29 . 2010-05-22 13:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
  52. 2012-03-17 09:29 . 2010-05-22 13:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
  53. 2012-03-17 09:29 . 2010-05-22 13:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
  54. 2012-03-11 21:13 . 2011-10-21 17:44 41200 ----a-w- c:\windows\system32\cmdcsr.dll
  55. 2012-03-11 19:13 . 2012-03-11 19:13 577824 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
  56. 2012-03-11 19:13 . 2012-03-11 19:13 43248 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
  57. 2012-03-11 19:13 . 2012-03-11 19:13 22696 ----a-w- c:\windows\system32\drivers\cmderd.sys
  58. 2012-03-11 19:13 . 2012-03-11 19:13 301224 ----a-w- c:\windows\SysWow64\guard32.dll
  59. 2012-03-11 19:13 . 2012-03-11 19:13 389840 ----a-w- c:\windows\system32\guard64.dll
  60. 2012-03-01 00:02 . 2011-09-18 07:43 1737536 ----a-w- c:\windows\system32\nvdispco64.dll
  61. 2012-03-01 00:02 . 2011-09-18 07:43 1466176 ----a-w- c:\windows\system32\nvgenco64.dll
  62. 2012-02-29 11:26 . 2012-02-29 11:26 416064 ----a-w- c:\windows\SysWow64\nvStreaming.exe
  63. 2012-02-17 06:38 . 2012-03-14 10:08 1031680 ----a-w- c:\windows\system32\rdpcore.dll
  64. 2012-02-17 05:34 . 2012-03-14 10:08 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
  65. 2012-02-17 04:58 . 2012-03-14 10:08 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
  66. 2012-02-17 04:57 . 2012-03-14 10:08 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
  67. 2012-02-14 10:09 . 2012-02-14 10:09 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
  68. 2012-02-10 06:36 . 2012-03-14 10:08 1544192 ----a-w- c:\windows\system32\DWrite.dll
  69. 2012-02-10 05:38 . 2012-03-14 10:08 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
  70. 2012-02-03 17:27 . 2012-02-03 17:27 93200 ----a-w- c:\windows\system32\drivers\inspect.sys
  71. 2012-02-03 04:34 . 2012-03-14 10:08 3145728 ----a-w- c:\windows\system32\win32k.sys
  72. 2006-05-03 10:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
  73. 2007-02-21 11:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
  74. 2008-03-16 13:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
  75. .
  76. .
  77. (((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
  78. .
  79. .
  80. *Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
  81. REGEDIT4
  82. .
  83. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  84. "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
  85. .
  86. [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  87. "WLStart"="c:\program files (x86)\Windows Live\Installer\wlstart.exe" [2009-07-26 779600]
  88. .
  89. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  90. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  91. "ConsentPromptBehaviorUser"= 3 (0x3)
  92. "EnableLUA"= 0 (0x0)
  93. "EnableUIADesktopToggle"= 0 (0x0)
  94. "PromptOnSecureDesktop"= 0 (0x0)
  95. "DisableCAD"= 1 (0x1)
  96. "UseOEMBackground"= 0 (0x0)
  97. "DisplayLastLogonInfo"= 0 (0x0)
  98. .
  99. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  100. "AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll c:\windows\SysWOW64\guard32.dll c:\windows\SysWOW64\guard32.dll c:\windows\SysWOW64\guard32.dll c:\windows\SysWOW64\guard32.dll
  101. .
  102. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  103. "mixer9"=wdmaud.drv
  104. .
  105. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  106. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  107. .
  108. R3 appliandMP;appliandMP;c:\windows\system32\DRIVERS\appliand.sys [x]
  109. R3 AVerAF35;AVerMedia A835 USB DVB-T;c:\windows\system32\Drivers\AVerAF35.sys [x]
  110. R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
  111. R3 dump_wmimmc;dump_wmimmc;c:\games\Gunz\GameGuard\dump_wmimmc.sys [x]
  112. R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
  113. R3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]
  114. R3 enecirhid;ENE CIR HID Receiver;c:\windows\system32\DRIVERS\enecirhid.sys [x]
  115. R3 enecirhidma;ENE CIR HIDmini Filter;c:\windows\system32\DRIVERS\enecirhidma.sys [x]
  116. R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-01 129976]
  117. R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
  118. R3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
  119. R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-30 225792]
  120. R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
  121. R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
  122. R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
  123. R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
  124. R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
  125. R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
  126. R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
  127. R3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\DRIVERS\s115bus.sys [x]
  128. R3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s115mdfl.sys [x]
  129. R3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s115mdm.sys [x]
  130. R3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s115mgmt.sys [x]
  131. R3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s115obex.sys [x]
  132. R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
  133. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
  134. R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
  135. R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
  136. R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
  137. R3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMirror.sys [x]
  138. R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\pc\Desktop\RealTemp\WinRing0x64.sys [x]
  139. R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [x]
  140. R3 X6va001;X6va001;c:\users\pc\AppData\Local\Temp\0014A14.tmp [x]
  141. R3 X6va005;X6va005;c:\users\pc\AppData\Local\Temp\005732B.tmp [x]
  142. R4 AVerRemote;AVerRemote;c:\program files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2009-04-08 344064]
  143. R4 AVerScheduleService;AVerScheduleService;c:\program files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2009-10-09 389120]
  144. R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
  145. R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [x]
  146. R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
  147. S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
  148. S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
  149. S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
  150. S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
  151. S1 funfrm;funfrm; [x]
  152. S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
  153. S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  154. S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  155. S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
  156. S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 974944]
  157. S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
  158. S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
  159. S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
  160. S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [x]
  161. S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
  162. S3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
  163. S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
  164. S3 usbsmi;Lenovo EasyCamera;c:\windows\system32\DRIVERS\SMIksdrv.sys [x]
  165. S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys [x]
  166. S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
  167. .
  168. .
  169. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
  170. Akamai REG_MULTI_SZ Akamai
  171. .
  172. .
  173. --------- x86-64 -----------
  174. .
  175. .
  176. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  177. "EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\utility.exe" [2009-06-16 4333384]
  178. "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-30 1810728]
  179. "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 4035152]
  180. "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-03-11 9569096]
  181. .
  182. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  183. "LoadAppInit_DLLs"=0x1
  184. "AppInit_DLLs"=c:\windows\System32\guard64.dll c:\windows\System32\guard64.dll c:\windows\System32\guard64.dll c:\windows\System32\guard64.dll
  185. .
  186. ------- Doplňkový sken -------
  187. .
  188. uStart Page = about:blank
  189. uLocal Page = c:\windows\system32\blank.htm
  190. mLocal Page = c:\windows\SysWOW64\blank.htm
  191. IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
  192. IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
  193. IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
  194. TCP: DhcpNameServer = 89.203.157.2 192.168.0.1
  195. FF - ProfilePath - c:\users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\voljp54h.default\
  196. FF - prefs.js: browser.startup.homepage - chrome://speeddial/content/speeddial.xul
  197. .
  198. - - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
  199. .
  200. Toolbar-Locked - (no file)
  201. AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
  202. .
  203. .
  204. .
  205. [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
  206. "ImagePath"="c:\windows\system32\GameMon.des -service"
  207. .
  208. [HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va001]
  209. "ImagePath"="\??\c:\users\pc\AppData\Local\Temp\0014A14.tmp"
  210. .
  211. [HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va005]
  212. "ImagePath"="\??\c:\users\pc\AppData\Local\Temp\005732B.tmp"
  213. .
  214. --------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
  215. .
  216. [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  217. @Denied: (A) (Everyone)
  218. .
  219. [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  220. @Denied: (A) (Everyone)
  221. .
  222. [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
  223. "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  224. 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
  225. .
  226. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  227. @Denied: (A) (Users)
  228. @Denied: (A) (Everyone)
  229. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  230. "BlindDial"=dword:00000000
  231. .
  232. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  233. @Denied: (A) (Users)
  234. @Denied: (A) (Everyone)
  235. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  236. "BlindDial"=dword:00000000
  237. .
  238. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
  239. @Denied: (A) (Users)
  240. @Denied: (A) (Everyone)
  241. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  242. "BlindDial"=dword:00000000
  243. .
  244. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
  245. @Denied: (A) (Users)
  246. @Denied: (A) (Everyone)
  247. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  248. "BlindDial"=dword:00000000
  249. .
  250. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
  251. @Denied: (A) (Users)
  252. @Denied: (A) (Everyone)
  253. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  254. "BlindDial"=dword:00000000
  255. .
  256. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
  257. @Denied: (A) (Users)
  258. @Denied: (A) (Everyone)
  259. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  260. "BlindDial"=dword:00000000
  261. .
  262. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  263. @Denied: (Full) (Everyone)
  264. .
  265. Celkový čas: 2012-05-02 19:02:17
  266. ComboFix-quarantined-files.txt 2012-05-02 17:02
  267. .
  268. Před spuštěním: Volných bajtů: 24 281 886 720
  269. Po spuštění: Volných bajtů: 24 212 160 512
  270. .
  271. - - End Of File - - 64B258965A84A8E4DA73D7701B612C08
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!